Endpoint Vulnerability

Out-of-bounds write in Cairo

Description

Security researcher Jukka Jyl nki reported a crash in the the Cairo graphics library. This happens when Cairo paints out-of-bounds to the destination buffer in the compositing function when working with canvas in certain circumstances. This issue allows malicious web content to cause a potentially exploitable crash.

Affected Products

SeaMonkey

References

CVE-2014-1528,